Back to Malware Drops
6c5e1212691e6b3c6628c328cf81f960b0ecdb47ca35b171babcaeb18f19a2d3
MD56469200b1ac580d6cc0f571e714ce2ce
SSDEEP—
File Typetext/x-script
Size1.9 KB
Sources8
Downloads0
First SeenFeb 29, 2024
Last SeenFeb 29, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (3)
- skid[.]mips
- skid[.]mpsl
- skid[.]ppc
ipv4 (1)
- 159[.]223[.]212[.]11
url (20)
- hxxp://159[.]223[.]212[.]11/skid[.]arm4;
- hxxp://159[.]223[.]212[.]11/skid[.]arm4;cat
- hxxp://159[.]223[.]212[.]11/skid[.]arm5;
- hxxp://159[.]223[.]212[.]11/skid[.]arm5;cat
- hxxp://159[.]223[.]212[.]11/skid[.]arm6;
- hxxp://159[.]223[.]212[.]11/skid[.]arm6;cat
- hxxp://159[.]223[.]212[.]11/skid[.]arm7;
- hxxp://159[.]223[.]212[.]11/skid[.]arm7;cat
- hxxp://159[.]223[.]212[.]11/skid[.]m68k;
- hxxp://159[.]223[.]212[.]11/skid[.]m68k;cat
- hxxp://159[.]223[.]212[.]11/skid[.]mips;
- hxxp://159[.]223[.]212[.]11/skid[.]mips;cat
- hxxp://159[.]223[.]212[.]11/skid[.]mpsl;
- hxxp://159[.]223[.]212[.]11/skid[.]mpsl;cat
- hxxp://159[.]223[.]212[.]11/skid[.]ppc;
- hxxp://159[.]223[.]212[.]11/skid[.]ppc;cat
- hxxp://159[.]223[.]212[.]11/skid[.]sh4;
- hxxp://159[.]223[.]212[.]11/skid[.]sh4;cat
- hxxp://159[.]223[.]212[.]11/skid[.]x86;
- hxxp://159[.]223[.]212[.]11/skid[.]x86;cat